US20040162986A1 - Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services - Google Patents
Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services Download PDFInfo
- Publication number
- US20040162986A1 US20040162986A1 US10/778,532 US77853204A US2004162986A1 US 20040162986 A1 US20040162986 A1 US 20040162986A1 US 77853204 A US77853204 A US 77853204A US 2004162986 A1 US2004162986 A1 US 2004162986A1
- Authority
- US
- United States
- Prior art keywords
- session
- requests
- user
- identifier
- session identifier
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/12—Applying verification of the received information
- H04L63/123—Applying verification of the received information received data contents, e.g. message integrity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/14—Session management
Definitions
- the present invention relates to computer networks and, more particularly, to methods, apparatuses and systems facilitating the integration of services offered by a first on-line service entity with the services offered by a second on-line service entity.
- the present invention facilitates the integration of network-based credit data retrieval and reporting systems with third party web sites and other network-based functionality.
- Providers of on-line or network-based services typically support user accounts into which users log to persist user account data, such as user names, passwords, addresses, payment information, preferences, etc.
- user account data such as user names, passwords, addresses, payment information, preferences, etc.
- Such providers typically maintain their own proprietary, unique membership model including what types of membership data is maintained.
- the prior art methodology typically requires the two organizations to either 1) expend a large effort to bi-directionally synchronize the information associated with each organization's membership model and user account data, and/or 2) have one service entity proxy the session between the second service entity and the user. For technical and sometimes other reasons, such exchanges of data are not desirable.
- a need in the art exists for methods, apparatuses and systems that facilitate collaboration between on-line service entities.
- a need in the art further exists for methods, apparatuses and system facilitating the integration of services offered by a first on-line service entity into the services provided by a second on-line service entity.
- Embodiments of the present invention substantially fulfill these needs.
- the present invention provides methods, apparatuses and systems facilitating integration of the functionality associated with a first on-line service entity with the functionality associated with a second on-line service entity.
- Embodiments of the present invention allow a first on-line service entity having its own membership model to efficiently collaborate with a second on-line service entity to offer its users the services of the second on-line service entity in a seamless and consistently branded manner.
- embodiments of the present invention obviate the need for synchronization of the membership models between the first and second on-line service entities.
- embodiments of the present invention allow the second on-line service entity to provide services to the users associated with the first on-line service entity in a seamless manner without the first on-line service entity having to proxy the session between the second on-line service entity and the users.
- This approach allows one on-line service entity to leverage its existing membership model with the offerings of a second on-line service entity, such as an on-line credit report service, without having to transmit any sensitive credit or other user information between the entities.
- FIG. 1 is a functional block diagram illustrating a computer network environment including the functionality associated with a first embodiment of the present invention.
- FIG. 2 is a flow chart diagram illustrating a method, according to an implementation of the present invention, directed to generating session identifiers in response to requests from third-party web sites.
- FIG. 3 is a flow chart diagram providing a method, according to one implementation of the present invention, directed to interacting with users who have been redirected to a server or cluster or servers that issued session identifiers.
- an embodiment of the present invention operates in a computer network environment comprising at least one credit reporting bureau 20 , credit scoring engine 25 , third-party web site 30 , credit data retrieval system 50 , and at least one client computer 60 associated with one or more individual users.
- Computer network 90 can be any suitable computer network, including the Internet or any wide area network.
- users access credit data retrieval system 50 over computer network 90 with a network access device, such as client computer 60 including suitable client software, such as a web browser, for transmitting requests and receiving responses over a computer network.
- suitable network access devices include desktop computers, laptop computers, Personal Digital Assistants (PDAs), and any other wireless or wireline device capable of exchanging data over computer network 90 and providing a user interface displaying data received over computer network 90 .
- PDAs Personal Digital Assistants
- the present invention operates in connection with an HTML compliant browser, such as the Microsoft Internet Explorer® or Netscape Navigator® browsers.
- credit data retrieval system 50 comprises Web/HTTP server 52 , application server 54 , database server 56 and web services network gateway 55 .
- Web/HTTP server 52 is operative to establish HTTP or other connections with client computers 60 (or other network access devices) to receive requests for files or other data over computer network 90 and transmit responses in return, as discussed herein.
- Web/HTTP server 52 or at least the HTTP server functionality that operates in connection with third-party web site 30 , is operative to establish privileged sessions; that is, Web/HTTP server 52 only generates sessions and creates session IDs indirectly for users only in connection with partner third-party web sites 30 after authentication (such as verification or validation of a digital signature of third-party web site 30 ) (see below).
- credit data retrieval system 50 further includes an additional Web/HTTP server (not shown), including an IP address different from Web/HTTP server 52 , that operates in a conventional manner to process requests and responses for direct users (i.e., users not associated with third-party web site 30 ) of credit data retrieval system 50 .
- Web/HTTP server 52 incorporates conventional HTTP server and connection state management functionality.
- Web/HTTP server 52 passes user requests to application server 54 which composes a response and transmits it to the user via web server 52 .
- web server 52 establishes a secure connection to transmit data to users and other sites, using the SSL (“Secure Sockets Layer”) encryption protocol part of the HTTP(S) (“Secure HTTP”) protocol, or any other similar protocol for transmitting confidential or private information over an open computer network.
- Database server 56 stores the content and other data associated with operation of credit data retrieval system 50 .
- Application server 54 includes the functionality handling the overall process flows, described herein, associated with credit data retrieval system 50 .
- Application server 54 accesses database server 56 for data (e.g., HTML page content, etc.) to generate responses to user requests and transmit them to web server 52 for ultimate transmission to the requesting user.
- data e.g., HTML page content, etc.
- the functionality described herein may be included in a single logical server or module or distributed in separate modules.
- the functionality described herein may reside on a single physical server or across multiple physical servers.
- web server 52 is depicted in FIG. 1, multiple web servers may be used in connection with session clustering to store session state information in a central database for use by the multiple web servers, and to provide for failover support.
- third-party web site 30 comprises web server 32 , application server 34 and database server 36 .
- Web server 32 receives requests for files or other data over computer network 40 and passes them to application server 34 .
- web server 32 transmits data to users and other sites using the HTTP and related protocols, or any other similar protocol for transmitting data over a computer network.
- database server 36 stores content and other data relating to the operation of the third-party web site 30 .
- Application server 34 accesses database server 36 and generates pages or other files that web server 32 transmits over computer network 90 to the intended recipient.
- third-party web site 30 offers its users the ability to obtain credit report information by advertising these services on the web pages, such as its home page, it serves to users. Users who opt for such services click on links or otherwise communicate a request to order the services, thereby triggering the methodology and protocols discussed below.
- Credit scoring engine 25 is a web-based application service operative to compute a credit score given a set of credit data. Credit scoring engine 25 is operative to receive credit report data relating to an individual or other entity and process the data against a proprietary or other credit scoring model to yield a credit score. Suitable credit scoring models including a FICO® credit scoring model, CreditXpert®, TransRisk®, or any other suitable credit scoring model. In one embodiment, credit scoring engine 25 is a stand-alone web-based application remote from credit data retrieval system 50 and/or credit reporting bureau 20 . In other embodiments, the functionality of credit scoring engine 25 , however, is integrated into other components associated with computer network 90 . For example, credit scoring engine 25 may be incorporated as an internally executed application (such as CreditXpert) within credit data retrieval system 50 , or within credit reporting bureau 20 .
- CreditXpert an internally executed application
- Credit reporting bureau 20 maintains a database or other repository of credit history data for at least one individual or other entity, such as the credit reporting services offered by TransUnion®, Equifax®, and Experian®. Credit reporting bureau(s) 20 offer web-based credit reporting application services. In one embodiment, at least one credit reporting bureau 20 is operative to access credit scoring engine 25 in response to a request from credit data retrieval system 50 ; in such an embodiment, the credit reporting bureau 20 transmits the credit reporting data associated with the individual to credit scoring engine 25 and receives a credit score in return. The credit reporting bureau 20 then returns the credit score with the credit report data to credit data retrieval system 50 .
- credit data retrieval system 50 formulates an XML request and transmits it to credit reporting bureau 20 to retrieve credit report data.
- the XML request format includes a flag or other indication of whether a credit score is also desired.
- Credit reporting bureau 20 responds to the asynchronous or synchronous request by transmitting an XML response including credit report data corresponding to the individual identified in the XML request.
- credit data retrieval system 50 operates in connection with one credit reporting bureau, such as TransUnion, Equifax, or Experian; however, in other embodiments, credit data retrieval system 50 obtains credit report data for a particular individual from at least two credit reporting bureaus 20 and merges the data into a single report.
- Co-pending and commonly owned application Ser. No. 09/644,139 filed Aug. 22, 2000 in the name of Guy et al. and entitled “Credit and Financial Information and Management System” discloses methods and systems that obtain credit report data from multiple sources and merge such data into a single report (incorporated by reference herein).
- credit data retrieval system 50 further includes network services gateway 55 which implements web services network functionality to process and route service requests and responses over a computer network.
- network services gateway 55 implements a communications model based on requests and responses.
- Network services gateway 55 generates and transmits a service request to an external vendor, such as credit reporting bureau 20 and/or credit scoring engine 25 , which receives the request, executes operations on data associated with the request, and returns a response.
- Network services gateway 55 in one embodiment, further includes other web services functionality such as logging of service requests and responses allowing for tracking of costs and usage of services.
- Network services gateway 55 in one embodiment, relies on secure HTTP communications and XML technologies for request and response formats.
- network services gateway 55 maintains Document Type Definitions (DTDs) and/or XML Schema Definitions (XSDs) that define the format of the XML request and XML response.
- DTDs Document Type Definitions
- XSDs XML Schema Definitions
- Request and response XSDs include a message type, transaction identification, vendor/service identification, and an application identification.
- the credit retrieval functionality of system 50 may be incorporated into the functionality of credit reporting bureau 20 .
- the functionality of credit scoring engine 25 may be incorporated into credit reporting bureau 20 .
- FIG. 1 further illustrates the overall message and process flow associated with an embodiment of the present invention.
- FIGS. 2 and 3 illustrate methods performed, in one implementation, by credit report retrieval system 50 .
- a user at client computer 60 accesses third-party web site 30 by inputting the URL or IP address of web site 30 into the location bar of the browser or other client-side application resident on client computer 60 (Ref. No. 1 ).
- third-party web site 30 offers credit reporting services to the user by adding appropriate links and content to at least some of the web pages it serves.
- third-party web site 30 presents an order page to the user requiring the user to enter personal information sufficient to identify the user for purposes of pulling a credit report and also requires the user to enter payment information, such as a credit card account number and expiration date.
- Third-party web site 30 processes the payment transaction using the user-supplied information in a conventional or any suitable manner.
- third party web site 30 if the payment transaction is authorized, third party web site 30 then transmits a receipt page to the user seeking confirmation of the order.
- third-party web site 30 then composes and transmits a request for a session ID from credit data retrieval system 50 (Ref. No. 2 ).
- the request includes a unique userid, co-brand id, transaction information, the user's social security number (SSN), first name, last name, address, and email.
- the request is formatted as an XML request.
- the request is digitally signed with the private key of the third-party web site 30 and encrypted with the public key corresponding to credit data retrieval system 50 .
- third-party web site 30 posts this request to credit data retrieval system 50 , which receives the request (FIG. 1, 102) operates on the request to generate a session ID and return it in a response to third-party web site 30 (Ref No. 3 ).
- the functionality associated with the credit data retrieval system 50 that generates session IDs is presented as a web-based application service accessible to third-party web site 30 via Simple Object Access Protocol (SOAP) based protocols and technologies.
- SOAP Simple Object Access Protocol
- credit data retrieval system 50 verifies the digital signature associated with the session ID request ( 104 ), decrypts the data using its private key ( 106 ), and initiates processing of the request.
- Credit data retrieval system 50 uses the state management functionality of web/HTTP server 52 to generate a session for the end user identified in the request ( 108 ) and returns a session ID to third-party web site 30 (Ref. No. 3 ) ( 110 ). Credit data retrieval system 50 also stores the user's personally identifying information in association with the session ID for later use ( 112 ).
- third-party web site 30 After receipt of the session ID, third-party web site 30 sets the session ID on the browser executed on client computer 60 in the form of a cookie and redirects the end user's browser to the credit data retrieval system to begin the authentication/fulfillment process (Ref. No. 4 ).
- third-party web site 30 uses HTML frames to allow the user's experience to be branded with the third-party web site identifiers.
- third-party web site 30 may use a title (top) frame, a left (navigation) frame and a main/body frame including the majority of the content.
- the redirection message (e.g., an HTML page including a meta refresh tag pointing to the URL of credit data retrieval system 50 ) is transmitted to the browser within the context of a main/body frame.
- HTML frames are possible.
- the redirection message can also be transmitted within the context of a new or pop-up browser window, or within the context of a new HTML page transmitted to the same browser window.
- the redirection message and process flow can take a variety of forms.
- the redirection message may comprise an HTML page including a meta refresh tag and the URL or IP address associated with the credit data retrieval system 50 .
- the HTML page may include JavaScript in the HTML page that, when executed within the context of the user's browser, is operative to generate an HTTP GET request to credit data retrieval system 50 .
- third-party web site 30 rather than directly interacting with credit data retrieval system 50 to obtain a session ID, transmits an HTML page including an operative, such as Javascript code or a link embedded in the HTML page, to cause the browser on client computer 60 to generate an HTTP POST request to credit data retrieval system 50 including a request for a session identifier that, in one implementation, includes the user information discussed above, and is digitally signed by third-party web site 30 , encrypted, and encoded in a hidden field.
- Credit data retrieval system 50 verifies the digital signature and decrypts the user information data and generates a session ID and returns it directly to the user's browser.
- web/HTTP server 52 receives the request (FIG. 3, 202) and looks up the session ID contained in the cookie included in the request header against a session state database as with other conventional HTTP requests ( 204 ). Assuming the session ID is valid, credit retrieval system 50 then initiates the authentication and reporting functionality and interacts directly with the user at client computer 60 (Ref. No. 5 ) for the remainder of the session. In one embodiment, credit retrieval system 50 first presents at least one agreement associated with a credit reporting bureau to the user and prompts the user for acceptance or rejection of the agreement ( 206 ).
- credit data retrieval system 50 accesses credit reporting bureau 20 for a credit report corresponding to the user, using the personally identifying information originally obtained from third-party web site 30 ( 208 ). In one embodiment, credit data retrieval system 50 authenticates the user by prompting him/her for information contained in the credit report and matching the user's response against the credit report data ( 210 ). As one skilled in the art will recognize, any suitable authentication protocol can be used. For example, the authentication protocols disclosed in U.S. Pat. No. 6,263,447, incorporated by reference herein, can be incorporated into embodiments of the present invention.
- credit data retrieval system 50 transmits an HTML page including the credit report to the user ( 214 ).
- credit data retrieval system 50 includes an order for a credit score and displays the results to the user, as well.
- process flows can be implemented for delivering credit report functionality to users. For example, the user may be provided a combined credit report as described in U.S. application Ser. No. 09/644,139, incorporated by reference herein.
- credit data retrieval system 50 establishes a user account and password (in one embodiment, provided by the user) and stores the retrieved credit report (for subsequent viewing) in association with the user account ( 212 ).
- credit data retrieval system 50 uses the userid supplied by third-party web site 30 as the user account identifier.
- the user account is also tagged with the co-brand id corresponding to third-party web site 30 .
- credit data retrieval system 50 redirects the user's browser to third-party web site 30 ( 218 ). To gain subsequent access to credit reporting data, the user must access third-party web site 30 to initiate another session with credit data retrieval system 50 , as described below.
- the functionality described herein also allows the user to gain subsequent and continued access to his or her user account through the context of third-party web site 30 .
- the user logs into or otherwise accesses third party web site 30 and elects to view an existing credit report stored in a user account, as discussed above.
- Third party web site 30 formulates a request for a session ID, including a userid, transaction information (such as “view existing order”) and co-brand id, as discussed above.
- Credit data retrieval system 50 verifies the digital signature, decrypts the request, and generates a session ID and transmits it to third party web site 30 .
- Credit data retrieval system 50 also stores the userid and other transaction information in association with the session ID for later use.
- credit data retrieval system 50 When the user is redirected to credit data retrieval system 50 , it prompts the user for a user name and password.
- credit data retrieval system 50 uses the userid supplied by third-party web site 30 to identify the user. If the user inputs a valid user name and password, credit data retrieval system 50 displays the credit report, if any, associated with the user account. Once logged in, the user has the option of ordering other services and/or ordering a new credit report.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer And Data Communications (AREA)
- Information Transfer Between Computers (AREA)
Abstract
Description
- The present application claims priority from U.S. provisional patent application Ser. No. 60/447,224 filed Feb. 13, 2003 and entitled “Methods, Apparatuses and Systems Facilitating Seamless, Virtual Integration of Online Membership Models and Services.”
- The present invention relates to computer networks and, more particularly, to methods, apparatuses and systems facilitating the integration of services offered by a first on-line service entity with the services offered by a second on-line service entity. In one embodiment, the present invention facilitates the integration of network-based credit data retrieval and reporting systems with third party web sites and other network-based functionality.
- Providers of on-line or network-based services typically support user accounts into which users log to persist user account data, such as user names, passwords, addresses, payment information, preferences, etc. Such providers typically maintain their own proprietary, unique membership model including what types of membership data is maintained. When two separate on-line service providers desire to collaborate to extend the services or other functionality offered by one service provider with the services or functionality offered by the second service provider, the prior art methodology typically requires the two organizations to either 1) expend a large effort to bi-directionally synchronize the information associated with each organization's membership model and user account data, and/or 2) have one service entity proxy the session between the second service entity and the user. For technical and sometimes other reasons, such exchanges of data are not desirable. Moreover, for legal or other reasons, it is desirable and/or mandated by law or otherwise, that the data exchanged between a user and a first on-line service provider not flow through a second on-line service provider acting essentially as a proxy. This requirement, however, presents certain technical challenges when collaborating on-line service providers desire that their respective users experience a consistently branded service.
- In light of the foregoing, a need in the art exists for methods, apparatuses and systems that facilitate collaboration between on-line service entities. A need in the art further exists for methods, apparatuses and system facilitating the integration of services offered by a first on-line service entity into the services provided by a second on-line service entity. A need further exists for methods, apparatuses and systems that allow for seamless, virtual integration of on-line service functionality without having one on-line service entity acting as a proxy for a second on-line service entity. Embodiments of the present invention substantially fulfill these needs.
- The present invention provides methods, apparatuses and systems facilitating integration of the functionality associated with a first on-line service entity with the functionality associated with a second on-line service entity. Embodiments of the present invention allow a first on-line service entity having its own membership model to efficiently collaborate with a second on-line service entity to offer its users the services of the second on-line service entity in a seamless and consistently branded manner. Moreover, embodiments of the present invention obviate the need for synchronization of the membership models between the first and second on-line service entities. In addition, embodiments of the present invention allow the second on-line service entity to provide services to the users associated with the first on-line service entity in a seamless manner without the first on-line service entity having to proxy the session between the second on-line service entity and the users. This approach, for example, allows one on-line service entity to leverage its existing membership model with the offerings of a second on-line service entity, such as an on-line credit report service, without having to transmit any sensitive credit or other user information between the entities.
- FIG. 1 is a functional block diagram illustrating a computer network environment including the functionality associated with a first embodiment of the present invention.
- FIG. 2 is a flow chart diagram illustrating a method, according to an implementation of the present invention, directed to generating session identifiers in response to requests from third-party web sites.
- FIG. 3 is a flow chart diagram providing a method, according to one implementation of the present invention, directed to interacting with users who have been redirected to a server or cluster or servers that issued session identifiers.
- As FIG. 1 provides, an embodiment of the present invention operates in a computer network environment comprising at least one
credit reporting bureau 20,credit scoring engine 25, third-party web site 30, creditdata retrieval system 50, and at least oneclient computer 60 associated with one or more individual users.Computer network 90 can be any suitable computer network, including the Internet or any wide area network. In one embodiment, users access creditdata retrieval system 50 overcomputer network 90 with a network access device, such asclient computer 60 including suitable client software, such as a web browser, for transmitting requests and receiving responses over a computer network. However, suitable network access devices include desktop computers, laptop computers, Personal Digital Assistants (PDAs), and any other wireless or wireline device capable of exchanging data overcomputer network 90 and providing a user interface displaying data received overcomputer network 90. In one embodiment, the present invention operates in connection with an HTML compliant browser, such as the Microsoft Internet Explorer® or Netscape Navigator® browsers. - In one embodiment, credit
data retrieval system 50 comprises Web/HTTP server 52,application server 54,database server 56 and webservices network gateway 55. Web/HTTP server 52 is operative to establish HTTP or other connections with client computers 60 (or other network access devices) to receive requests for files or other data overcomputer network 90 and transmit responses in return, as discussed herein. In one embodiment, Web/HTTPserver 52, or at least the HTTP server functionality that operates in connection with third-party web site 30, is operative to establish privileged sessions; that is, Web/HTTP server 52 only generates sessions and creates session IDs indirectly for users only in connection with partner third-party web sites 30 after authentication (such as verification or validation of a digital signature of third-party web site 30) (see below). Users, atclient computers 60 require a valid session ID (obtained from or in connection with third-party web site 30, as discussed below) to access Web/HTTP server 52 and, therefore, the functionality of creditdata retrieval system 50. Accordingly, this configuration allows users associated with third-party web site 30 to reinitiate a session only through third-party web site 30. In one embodiment, creditdata retrieval system 50 further includes an additional Web/HTTP server (not shown), including an IP address different from Web/HTTP server 52, that operates in a conventional manner to process requests and responses for direct users (i.e., users not associated with third-party web site 30) of creditdata retrieval system 50. - Otherwise, Web/
HTTP server 52, in one embodiment, incorporates conventional HTTP server and connection state management functionality. In one embodiment, Web/HTTP server 52 passes user requests toapplication server 54 which composes a response and transmits it to the user viaweb server 52. In one embodiment,web server 52 establishes a secure connection to transmit data to users and other sites, using the SSL (“Secure Sockets Layer”) encryption protocol part of the HTTP(S) (“Secure HTTP”) protocol, or any other similar protocol for transmitting confidential or private information over an open computer network.Database server 56 stores the content and other data associated with operation of creditdata retrieval system 50.Application server 54, in one embodiment, includes the functionality handling the overall process flows, described herein, associated with creditdata retrieval system 50.Application server 54, in one embodiment, accessesdatabase server 56 for data (e.g., HTML page content, etc.) to generate responses to user requests and transmit them toweb server 52 for ultimate transmission to the requesting user. As one skilled in the art will recognize, the distribution of functionality set forth above amongweb server 52,database server 56 andapplication server 54 is not required by any constraint. The functionality described herein may be included in a single logical server or module or distributed in separate modules. In addition, the functionality described herein may reside on a single physical server or across multiple physical servers. In addition, although oneweb server 52 is depicted in FIG. 1, multiple web servers may be used in connection with session clustering to store session state information in a central database for use by the multiple web servers, and to provide for failover support. - In one embodiment, third-
party web site 30 comprisesweb server 32,application server 34 anddatabase server 36.Web server 32 receives requests for files or other data over computer network 40 and passes them toapplication server 34. In one embodiment,web server 32 transmits data to users and other sites using the HTTP and related protocols, or any other similar protocol for transmitting data over a computer network. In one embodiment,database server 36 stores content and other data relating to the operation of the third-party web site 30.Application server 34, according to one embodiment, accessesdatabase server 36 and generates pages or other files thatweb server 32 transmits overcomputer network 90 to the intended recipient. As discussed more fully below, third-party web site 30 offers its users the ability to obtain credit report information by advertising these services on the web pages, such as its home page, it serves to users. Users who opt for such services click on links or otherwise communicate a request to order the services, thereby triggering the methodology and protocols discussed below. -
Credit scoring engine 25, in one embodiment, is a web-based application service operative to compute a credit score given a set of credit data.Credit scoring engine 25 is operative to receive credit report data relating to an individual or other entity and process the data against a proprietary or other credit scoring model to yield a credit score. Suitable credit scoring models including a FICO® credit scoring model, CreditXpert®, TransRisk®, or any other suitable credit scoring model. In one embodiment,credit scoring engine 25 is a stand-alone web-based application remote from creditdata retrieval system 50 and/orcredit reporting bureau 20. In other embodiments, the functionality ofcredit scoring engine 25, however, is integrated into other components associated withcomputer network 90. For example,credit scoring engine 25 may be incorporated as an internally executed application (such as CreditXpert) within creditdata retrieval system 50, or withincredit reporting bureau 20. -
Credit reporting bureau 20 maintains a database or other repository of credit history data for at least one individual or other entity, such as the credit reporting services offered by TransUnion®, Equifax®, and Experian®. Credit reporting bureau(s) 20 offer web-based credit reporting application services. In one embodiment, at least onecredit reporting bureau 20 is operative to accesscredit scoring engine 25 in response to a request from creditdata retrieval system 50; in such an embodiment, thecredit reporting bureau 20 transmits the credit reporting data associated with the individual tocredit scoring engine 25 and receives a credit score in return. Thecredit reporting bureau 20 then returns the credit score with the credit report data to creditdata retrieval system 50. In one embodiment, creditdata retrieval system 50 formulates an XML request and transmits it to creditreporting bureau 20 to retrieve credit report data. In one embodiment, the XML request format includes a flag or other indication of whether a credit score is also desired.Credit reporting bureau 20 responds to the asynchronous or synchronous request by transmitting an XML response including credit report data corresponding to the individual identified in the XML request. In one embodiment, creditdata retrieval system 50 operates in connection with one credit reporting bureau, such as TransUnion, Equifax, or Experian; however, in other embodiments, creditdata retrieval system 50 obtains credit report data for a particular individual from at least twocredit reporting bureaus 20 and merges the data into a single report. Co-pending and commonly owned application Ser. No. 09/644,139 filed Aug. 22, 2000 in the name of Guy et al. and entitled “Credit and Financial Information and Management System” discloses methods and systems that obtain credit report data from multiple sources and merge such data into a single report (incorporated by reference herein). - As discussed above, credit
data retrieval system 50 further includesnetwork services gateway 55 which implements web services network functionality to process and route service requests and responses over a computer network. In one embodiment,network services gateway 55 implements a communications model based on requests and responses.Network services gateway 55 generates and transmits a service request to an external vendor, such ascredit reporting bureau 20 and/orcredit scoring engine 25, which receives the request, executes operations on data associated with the request, and returns a response.Network services gateway 55, in one embodiment, further includes other web services functionality such as logging of service requests and responses allowing for tracking of costs and usage of services.Network services gateway 55, in one embodiment, relies on secure HTTP communications and XML technologies for request and response formats. In one embodiment,network services gateway 55 maintains Document Type Definitions (DTDs) and/or XML Schema Definitions (XSDs) that define the format of the XML request and XML response. Request and response XSDs, in one form, include a message type, transaction identification, vendor/service identification, and an application identification. - As one skilled in the art will recognize various embodiments are possible. For example, the credit retrieval functionality of
system 50 may be incorporated into the functionality ofcredit reporting bureau 20. In addition, the functionality ofcredit scoring engine 25 may be incorporated intocredit reporting bureau 20. - A. New Orders for Credit Reports
- FIG. 1 further illustrates the overall message and process flow associated with an embodiment of the present invention. In addition, FIGS. 2 and 3 illustrate methods performed, in one implementation, by credit
report retrieval system 50. As FIG. 1 illustrates, a user atclient computer 60 accesses third-party web site 30 by inputting the URL or IP address ofweb site 30 into the location bar of the browser or other client-side application resident on client computer 60 (Ref. No. 1). As discussed above, third-party web site 30 offers credit reporting services to the user by adding appropriate links and content to at least some of the web pages it serves. In one embodiment, third-party web site 30 presents an order page to the user requiring the user to enter personal information sufficient to identify the user for purposes of pulling a credit report and also requires the user to enter payment information, such as a credit card account number and expiration date. Third-party web site 30, in one embodiment, processes the payment transaction using the user-supplied information in a conventional or any suitable manner. - In one embodiment, if the payment transaction is authorized, third
party web site 30 then transmits a receipt page to the user seeking confirmation of the order. When the user confirms the order by, for example, clicking on an “accept” button or other interface control, third-party web site 30 then composes and transmits a request for a session ID from credit data retrieval system 50 (Ref. No. 2). In one embodiment, the request includes a unique userid, co-brand id, transaction information, the user's social security number (SSN), first name, last name, address, and email. In one embodiment, the request is formatted as an XML request. In one embodiment, the request is digitally signed with the private key of the third-party web site 30 and encrypted with the public key corresponding to creditdata retrieval system 50. - In one embodiment, third-
party web site 30 then posts this request to creditdata retrieval system 50, which receives the request (FIG. 1, 102) operates on the request to generate a session ID and return it in a response to third-party web site 30 (Ref No. 3). In one embodiment, the functionality associated with the creditdata retrieval system 50 that generates session IDs is presented as a web-based application service accessible to third-party web site 30 via Simple Object Access Protocol (SOAP) based protocols and technologies. In one embodiment, creditdata retrieval system 50 verifies the digital signature associated with the session ID request (104), decrypts the data using its private key (106), and initiates processing of the request. Creditdata retrieval system 50, in one implementation, uses the state management functionality of web/HTTP server 52 to generate a session for the end user identified in the request (108) and returns a session ID to third-party web site 30 (Ref. No. 3) (110). Creditdata retrieval system 50 also stores the user's personally identifying information in association with the session ID for later use (112). - After receipt of the session ID, third-
party web site 30 sets the session ID on the browser executed onclient computer 60 in the form of a cookie and redirects the end user's browser to the credit data retrieval system to begin the authentication/fulfillment process (Ref. No. 4). In one embodiment, third-party web site 30 uses HTML frames to allow the user's experience to be branded with the third-party web site identifiers. For example, third-party web site 30 may use a title (top) frame, a left (navigation) frame and a main/body frame including the majority of the content. According to this embodiment, the redirection message (e.g., an HTML page including a meta refresh tag pointing to the URL of credit data retrieval system 50) is transmitted to the browser within the context of a main/body frame. Other embodiments are possible. For example, the use of HTML frames is only one preferred embodiment. The redirection message can also be transmitted within the context of a new or pop-up browser window, or within the context of a new HTML page transmitted to the same browser window. - The redirection message and process flow can take a variety of forms. As discussed above, the redirection message may comprise an HTML page including a meta refresh tag and the URL or IP address associated with the credit
data retrieval system 50. In another embodiment, the HTML page may include JavaScript in the HTML page that, when executed within the context of the user's browser, is operative to generate an HTTP GET request to creditdata retrieval system 50. In another embodiment, third-party web site 30, rather than directly interacting with creditdata retrieval system 50 to obtain a session ID, transmits an HTML page including an operative, such as Javascript code or a link embedded in the HTML page, to cause the browser onclient computer 60 to generate an HTTP POST request to creditdata retrieval system 50 including a request for a session identifier that, in one implementation, includes the user information discussed above, and is digitally signed by third-party web site 30, encrypted, and encoded in a hidden field. Creditdata retrieval system 50, as discussed above, verifies the digital signature and decrypts the user information data and generates a session ID and returns it directly to the user's browser. - When the browser processes the redirection message and transmits the request to credit
data retrieval system 50, web/HTTP server 52 receives the request (FIG. 3, 202) and looks up the session ID contained in the cookie included in the request header against a session state database as with other conventional HTTP requests (204). Assuming the session ID is valid,credit retrieval system 50 then initiates the authentication and reporting functionality and interacts directly with the user at client computer 60 (Ref. No. 5) for the remainder of the session. In one embodiment,credit retrieval system 50 first presents at least one agreement associated with a credit reporting bureau to the user and prompts the user for acceptance or rejection of the agreement (206). If the user accepts the agreement, creditdata retrieval system 50 accessescredit reporting bureau 20 for a credit report corresponding to the user, using the personally identifying information originally obtained from third-party web site 30 (208). In one embodiment, creditdata retrieval system 50 authenticates the user by prompting him/her for information contained in the credit report and matching the user's response against the credit report data (210). As one skilled in the art will recognize, any suitable authentication protocol can be used. For example, the authentication protocols disclosed in U.S. Pat. No. 6,263,447, incorporated by reference herein, can be incorporated into embodiments of the present invention. - Assuming the user is authenticated, credit
data retrieval system 50 then transmits an HTML page including the credit report to the user (214). As discussed above, in one embodiment, creditdata retrieval system 50 includes an order for a credit score and displays the results to the user, as well. As one skilled in the art will recognize, various process flows can be implemented for delivering credit report functionality to users. For example, the user may be provided a combined credit report as described in U.S. application Ser. No. 09/644,139, incorporated by reference herein. In one embodiment, after or before the user views the credit report, creditdata retrieval system 50 establishes a user account and password (in one embodiment, provided by the user) and stores the retrieved credit report (for subsequent viewing) in association with the user account (212). In one embodiment, creditdata retrieval system 50 uses the userid supplied by third-party web site 30 as the user account identifier. In one embodiment, the user account is also tagged with the co-brand id corresponding to third-party web site 30. After the session is terminated (216), creditdata retrieval system 50 redirects the user's browser to third-party web site 30 (218). To gain subsequent access to credit reporting data, the user must access third-party web site 30 to initiate another session with creditdata retrieval system 50, as described below. - B. Viewing an Existing Credit Report
- The functionality described herein, in one embodiment, also allows the user to gain subsequent and continued access to his or her user account through the context of third-
party web site 30. In one embodiment, the user logs into or otherwise accesses thirdparty web site 30 and elects to view an existing credit report stored in a user account, as discussed above. Thirdparty web site 30 formulates a request for a session ID, including a userid, transaction information (such as “view existing order”) and co-brand id, as discussed above. Creditdata retrieval system 50 verifies the digital signature, decrypts the request, and generates a session ID and transmits it to thirdparty web site 30. Creditdata retrieval system 50 also stores the userid and other transaction information in association with the session ID for later use. When the user is redirected to creditdata retrieval system 50, it prompts the user for a user name and password. In one embodiment, creditdata retrieval system 50 uses the userid supplied by third-party web site 30 to identify the user. If the user inputs a valid user name and password, creditdata retrieval system 50 displays the credit report, if any, associated with the user account. Once logged in, the user has the option of ordering other services and/or ordering a new credit report. - Although the present invention has been described relative to specific embodiments, it is not so limited. For example, although the embodiments discussed above allow for the integration of a credit data retrieval system with a third-party web site, the present invention has application to a wide variety of on-line services. In addition, many modifications and variations of the embodiments described above will become apparent. For example, although the embodiments described above employed HTML, HTTP(S) and XML protocols and technologies, the present invention can use any suitable communications and data exchange technologies and protocols. Furthermore, other changes in the details, steps and arrangement of various elements may be made by those of ordinary skill in the art without departing from the scope of the present invention. Accordingly, the present invention has been described with reference to specific embodiments. Other embodiments of the present invention will be apparent to one of ordinary skill in the art. It is, therefore, intended that the claims set forth below not be limited to the embodiments described herein.
Claims (23)
Priority Applications (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US10/778,532 US7337468B2 (en) | 2003-02-13 | 2004-02-13 | Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services |
US11/963,253 US8359393B2 (en) | 2003-02-13 | 2007-12-21 | Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services |
US13/745,598 US9124606B2 (en) | 2003-02-13 | 2013-01-18 | Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US44722403P | 2003-02-13 | 2003-02-13 | |
US10/778,532 US7337468B2 (en) | 2003-02-13 | 2004-02-13 | Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services |
Related Child Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/963,253 Continuation US8359393B2 (en) | 2003-02-13 | 2007-12-21 | Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services |
Publications (2)
Publication Number | Publication Date |
---|---|
US20040162986A1 true US20040162986A1 (en) | 2004-08-19 |
US7337468B2 US7337468B2 (en) | 2008-02-26 |
Family
ID=32869612
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US10/778,532 Active 2026-05-06 US7337468B2 (en) | 2003-02-13 | 2004-02-13 | Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services |
Country Status (3)
Country | Link |
---|---|
US (1) | US7337468B2 (en) |
CA (1) | CA2515957C (en) |
WO (1) | WO2004072830A2 (en) |
Cited By (20)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060036847A1 (en) * | 2004-08-10 | 2006-02-16 | Pure Networks, Inc. | Service licensing and maintenance for networks |
US20070106803A1 (en) * | 2005-11-07 | 2007-05-10 | Pixelpass Llc | Web site subscription management system |
US20080049779A1 (en) * | 2004-12-07 | 2008-02-28 | Alex Hopmann | Network administration tool employing a network administration protocol |
US20080098112A1 (en) * | 2005-03-22 | 2008-04-24 | Banga Jasminder S | Systems and Methods of Network Operation and Information Processing, Including Engaging Users of a Public-Access Network |
US20080288658A1 (en) * | 2005-03-22 | 2008-11-20 | Feeva Technology Inc. | Systems and methods of network operation and information processing, including use of unique/anonymous identifiers throughout all stages of information processing and delivery |
US20090006530A1 (en) * | 2007-06-28 | 2009-01-01 | Research In Motion Limited | System and method for transferring data to a portable electronic device |
US20090019314A1 (en) * | 2007-07-13 | 2009-01-15 | Purenetworks, Inc. | Network advisor |
US20090017832A1 (en) * | 2007-07-13 | 2009-01-15 | Purenetworks Inc. | Optimal-channel selection in a wireless network |
US20090055514A1 (en) * | 2007-07-13 | 2009-02-26 | Purenetworks, Inc. | Network configuration device |
US7827252B2 (en) | 2004-12-07 | 2010-11-02 | Cisco Technology, Inc. | Network device management |
US8316438B1 (en) | 2004-08-10 | 2012-11-20 | Pure Networks Llc | Network management providing network health information and lockdown security |
WO2013080166A1 (en) * | 2011-12-02 | 2013-06-06 | Entersekt (Pty) Ltd | Mutually authenticated communication |
US8478849B2 (en) | 2004-12-07 | 2013-07-02 | Pure Networks LLC. | Network administration tool |
US8649297B2 (en) | 2010-03-26 | 2014-02-11 | Cisco Technology, Inc. | System and method for simplifying secure network setup |
US8724515B2 (en) | 2010-03-26 | 2014-05-13 | Cisco Technology, Inc. | Configuring a secure network |
US20140289530A1 (en) * | 2011-10-24 | 2014-09-25 | Netapp, Inc. | Systems and methods for content delivery |
US9026639B2 (en) | 2007-07-13 | 2015-05-05 | Pure Networks Llc | Home network optimizing system |
US9356933B2 (en) | 2012-03-23 | 2016-05-31 | Netapp, Inc. | Implementing policies for an enterprise network using policy instructions that are executed through a local policy framework |
US9491077B2 (en) * | 2007-07-13 | 2016-11-08 | Cisco Technology, Inc. | Network metric reporting system |
US20240104249A1 (en) * | 2022-09-27 | 2024-03-28 | The Toronto-Dominion Bank | System and method for providing third party access to a system |
Families Citing this family (41)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9569797B1 (en) | 2002-05-30 | 2017-02-14 | Consumerinfo.Com, Inc. | Systems and methods of presenting simulated credit score information |
US9400589B1 (en) | 2002-05-30 | 2016-07-26 | Consumerinfo.Com, Inc. | Circular rotational interface for display of consumer credit information |
US9710852B1 (en) | 2002-05-30 | 2017-07-18 | Consumerinfo.Com, Inc. | Credit report timeline user interface |
US7593891B2 (en) | 2003-05-30 | 2009-09-22 | Experian Scorex Llc | Credit score simulation |
US7610229B1 (en) | 2002-05-30 | 2009-10-27 | Experian Information Solutions, Inc. | System and method for interactively simulating a credit-worthiness score |
US8359393B2 (en) | 2003-02-13 | 2013-01-22 | Transunion Interactive, Inc. | Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services |
US8930263B1 (en) | 2003-05-30 | 2015-01-06 | Consumerinfo.Com, Inc. | Credit data analysis |
US8732004B1 (en) | 2004-09-22 | 2014-05-20 | Experian Information Solutions, Inc. | Automated analysis of data to generate prospect notifications based on trigger events |
CN100433751C (en) * | 2005-12-03 | 2008-11-12 | 华为技术有限公司 | Method for realizing the third-part control bussiness |
CN101087241B (en) * | 2006-06-06 | 2011-04-20 | 华为技术有限公司 | An implementation method of third-party control service |
EP1959608A4 (en) * | 2005-12-03 | 2009-04-22 | Huawei Tech Co Ltd | A method, a application server and a system for implementing the third party control service |
US7711636B2 (en) | 2006-03-10 | 2010-05-04 | Experian Information Solutions, Inc. | Systems and methods for analyzing data |
US8799148B2 (en) * | 2006-08-31 | 2014-08-05 | Rohan K. K. Chandran | Systems and methods of ranking a plurality of credit card offers |
US8027888B2 (en) * | 2006-08-31 | 2011-09-27 | Experian Interactive Innovation Center, Llc | Online credit card prescreen systems and methods |
US11887175B2 (en) | 2006-08-31 | 2024-01-30 | Cpl Assets, Llc | Automatically determining a personalized set of programs or products including an interactive graphical user interface |
US7505973B2 (en) * | 2007-01-16 | 2009-03-17 | Microsoft Corporation | Efficient paging of search query results |
US8311513B1 (en) | 2007-06-27 | 2012-11-13 | ENORCOM Corporation | Automated mobile system |
US8495020B1 (en) | 2007-06-27 | 2013-07-23 | ENORCOM Corporation | Mobile information system |
US9690820B1 (en) | 2007-09-27 | 2017-06-27 | Experian Information Solutions, Inc. | Database system for triggering event notifications based on updates to database records |
US8312033B1 (en) | 2008-06-26 | 2012-11-13 | Experian Marketing Solutions, Inc. | Systems and methods for providing an integrated identifier |
US9256904B1 (en) | 2008-08-14 | 2016-02-09 | Experian Information Solutions, Inc. | Multi-bureau credit file freeze and unfreeze |
US20100174638A1 (en) | 2009-01-06 | 2010-07-08 | ConsumerInfo.com | Report existence monitoring |
US9558519B1 (en) | 2011-04-29 | 2017-01-31 | Consumerinfo.Com, Inc. | Exposing reporting cycle information |
US9607336B1 (en) | 2011-06-16 | 2017-03-28 | Consumerinfo.Com, Inc. | Providing credit inquiry alerts |
US8738516B1 (en) | 2011-10-13 | 2014-05-27 | Consumerinfo.Com, Inc. | Debt services candidate locator |
US9916621B1 (en) | 2012-11-30 | 2018-03-13 | Consumerinfo.Com, Inc. | Presentation of credit score factors |
US10255598B1 (en) | 2012-12-06 | 2019-04-09 | Consumerinfo.Com, Inc. | Credit card account data extraction |
US9870589B1 (en) | 2013-03-14 | 2018-01-16 | Consumerinfo.Com, Inc. | Credit utilization tracking and reporting |
US10664936B2 (en) | 2013-03-15 | 2020-05-26 | Csidentity Corporation | Authentication systems and methods for on-demand products |
US9633322B1 (en) | 2013-03-15 | 2017-04-25 | Consumerinfo.Com, Inc. | Adjustment of knowledge-based authentication |
US9721147B1 (en) | 2013-05-23 | 2017-08-01 | Consumerinfo.Com, Inc. | Digital identity |
USD759689S1 (en) | 2014-03-25 | 2016-06-21 | Consumerinfo.Com, Inc. | Display screen or portion thereof with graphical user interface |
USD760256S1 (en) | 2014-03-25 | 2016-06-28 | Consumerinfo.Com, Inc. | Display screen or portion thereof with graphical user interface |
USD759690S1 (en) | 2014-03-25 | 2016-06-21 | Consumerinfo.Com, Inc. | Display screen or portion thereof with graphical user interface |
US10373240B1 (en) | 2014-04-25 | 2019-08-06 | Csidentity Corporation | Systems, methods and computer-program products for eligibility verification |
US11410230B1 (en) | 2015-11-17 | 2022-08-09 | Consumerinfo.Com, Inc. | Realtime access and control of secure regulated data |
US10757154B1 (en) | 2015-11-24 | 2020-08-25 | Experian Information Solutions, Inc. | Real-time event-based notification system |
CN110383319B (en) | 2017-01-31 | 2023-05-26 | 益百利信息解决方案公司 | Large scale heterogeneous data ingestion and user resolution |
US10911234B2 (en) | 2018-06-22 | 2021-02-02 | Experian Information Solutions, Inc. | System and method for a token gateway environment |
US11265324B2 (en) | 2018-09-05 | 2022-03-01 | Consumerinfo.Com, Inc. | User permissions for access to secure data at third-party |
US11941065B1 (en) | 2019-09-13 | 2024-03-26 | Experian Information Solutions, Inc. | Single identifier platform for storing entity data |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6336135B1 (en) * | 1996-05-24 | 2002-01-01 | International Business Machines Corporation | Gateway for converting synchronous client/server protocols into asynchronous messaging protocols and storing session state information at the client |
US6480894B1 (en) * | 1998-03-06 | 2002-11-12 | I2 Technologies Us, Inc. | System and method for maintaining a state for a user session using a web system |
US6668322B1 (en) * | 1999-08-05 | 2003-12-23 | Sun Microsystems, Inc. | Access management system and method employing secure credentials |
US6675153B1 (en) * | 1999-07-06 | 2004-01-06 | Zix Corporation | Transaction authorization system |
US20050125238A1 (en) * | 2000-07-05 | 2005-06-09 | Alexander Theodorus Jansen | Method and system as well as data carrier for authenticating a client who desires to obtain a service or product from a supplier |
-
2004
- 2004-02-13 WO PCT/US2004/004501 patent/WO2004072830A2/en active Application Filing
- 2004-02-13 US US10/778,532 patent/US7337468B2/en active Active
- 2004-02-13 CA CA2515957A patent/CA2515957C/en not_active Expired - Lifetime
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6336135B1 (en) * | 1996-05-24 | 2002-01-01 | International Business Machines Corporation | Gateway for converting synchronous client/server protocols into asynchronous messaging protocols and storing session state information at the client |
US6480894B1 (en) * | 1998-03-06 | 2002-11-12 | I2 Technologies Us, Inc. | System and method for maintaining a state for a user session using a web system |
US6675153B1 (en) * | 1999-07-06 | 2004-01-06 | Zix Corporation | Transaction authorization system |
US6668322B1 (en) * | 1999-08-05 | 2003-12-23 | Sun Microsystems, Inc. | Access management system and method employing secure credentials |
US20050125238A1 (en) * | 2000-07-05 | 2005-06-09 | Alexander Theodorus Jansen | Method and system as well as data carrier for authenticating a client who desires to obtain a service or product from a supplier |
Cited By (32)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7904712B2 (en) | 2004-08-10 | 2011-03-08 | Cisco Technology, Inc. | Service licensing and maintenance for networks |
US20060036847A1 (en) * | 2004-08-10 | 2006-02-16 | Pure Networks, Inc. | Service licensing and maintenance for networks |
US8316438B1 (en) | 2004-08-10 | 2012-11-20 | Pure Networks Llc | Network management providing network health information and lockdown security |
US8671184B2 (en) | 2004-12-07 | 2014-03-11 | Pure Networks Llc | Network management |
US7925729B2 (en) | 2004-12-07 | 2011-04-12 | Cisco Technology, Inc. | Network management |
US8484332B2 (en) | 2004-12-07 | 2013-07-09 | Pure Networks Llc | Network management |
US20080049779A1 (en) * | 2004-12-07 | 2008-02-28 | Alex Hopmann | Network administration tool employing a network administration protocol |
US8478849B2 (en) | 2004-12-07 | 2013-07-02 | Pure Networks LLC. | Network administration tool |
US8463890B2 (en) | 2004-12-07 | 2013-06-11 | Pure Networks Llc | Network management |
US7827252B2 (en) | 2004-12-07 | 2010-11-02 | Cisco Technology, Inc. | Network device management |
US7886033B2 (en) | 2004-12-07 | 2011-02-08 | Cisco Technology, Inc. | Network administration tool employing a network administration protocol |
US20090019141A1 (en) * | 2004-12-07 | 2009-01-15 | Bush Steven M | Network management |
US20090049192A1 (en) * | 2005-03-22 | 2009-02-19 | Feeva Technology Inc. | Systems and methods of network operation and information processing, including use of unique/anonymous identifiers throughout all stages of information processing and delivery |
US20080288658A1 (en) * | 2005-03-22 | 2008-11-20 | Feeva Technology Inc. | Systems and methods of network operation and information processing, including use of unique/anonymous identifiers throughout all stages of information processing and delivery |
US20080098112A1 (en) * | 2005-03-22 | 2008-04-24 | Banga Jasminder S | Systems and Methods of Network Operation and Information Processing, Including Engaging Users of a Public-Access Network |
US20070106803A1 (en) * | 2005-11-07 | 2007-05-10 | Pixelpass Llc | Web site subscription management system |
US7809803B2 (en) * | 2007-06-28 | 2010-10-05 | Research In Motion Limited | System and method for transferring data to a portable electronic device |
US20090006530A1 (en) * | 2007-06-28 | 2009-01-01 | Research In Motion Limited | System and method for transferring data to a portable electronic device |
US9026639B2 (en) | 2007-07-13 | 2015-05-05 | Pure Networks Llc | Home network optimizing system |
US9491077B2 (en) * | 2007-07-13 | 2016-11-08 | Cisco Technology, Inc. | Network metric reporting system |
US7853829B2 (en) | 2007-07-13 | 2010-12-14 | Cisco Technology, Inc. | Network advisor |
US20090055514A1 (en) * | 2007-07-13 | 2009-02-26 | Purenetworks, Inc. | Network configuration device |
US20090017832A1 (en) * | 2007-07-13 | 2009-01-15 | Purenetworks Inc. | Optimal-channel selection in a wireless network |
US20090019314A1 (en) * | 2007-07-13 | 2009-01-15 | Purenetworks, Inc. | Network advisor |
US8014356B2 (en) | 2007-07-13 | 2011-09-06 | Cisco Technology, Inc. | Optimal-channel selection in a wireless network |
US8700743B2 (en) | 2007-07-13 | 2014-04-15 | Pure Networks Llc | Network configuration device |
US8649297B2 (en) | 2010-03-26 | 2014-02-11 | Cisco Technology, Inc. | System and method for simplifying secure network setup |
US8724515B2 (en) | 2010-03-26 | 2014-05-13 | Cisco Technology, Inc. | Configuring a secure network |
US20140289530A1 (en) * | 2011-10-24 | 2014-09-25 | Netapp, Inc. | Systems and methods for content delivery |
WO2013080166A1 (en) * | 2011-12-02 | 2013-06-06 | Entersekt (Pty) Ltd | Mutually authenticated communication |
US9356933B2 (en) | 2012-03-23 | 2016-05-31 | Netapp, Inc. | Implementing policies for an enterprise network using policy instructions that are executed through a local policy framework |
US20240104249A1 (en) * | 2022-09-27 | 2024-03-28 | The Toronto-Dominion Bank | System and method for providing third party access to a system |
Also Published As
Publication number | Publication date |
---|---|
CA2515957A1 (en) | 2004-08-26 |
WO2004072830A3 (en) | 2005-08-04 |
CA2515957C (en) | 2016-07-12 |
WO2004072830A2 (en) | 2004-08-26 |
US7337468B2 (en) | 2008-02-26 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7337468B2 (en) | Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services | |
US8359393B2 (en) | Methods, apparatuses and systems facilitating seamless, virtual integration of online membership models and services | |
CN1820481B (en) | System and method for authenticating clients in a client-server environment | |
US8117649B2 (en) | Distributed hierarchical identity management | |
US7747856B2 (en) | Session ticket authentication scheme | |
US20090077649A1 (en) | Secure messaging system and method | |
US6988085B2 (en) | System and method for real-time electronic inquiry, delivery, and reporting of credit information | |
US6957334B1 (en) | Method and system for secure guaranteed transactions over a computer network | |
US8209541B2 (en) | Method and system for single sign-on for multiple remote sites of a computer network | |
CN101341492B (en) | Secure identity management | |
US20040133521A1 (en) | System and method for real-time electronic inquiry, delivery, and reporting of credit information | |
US20030163691A1 (en) | System and method for authenticating sessions and other transactions | |
US20040030887A1 (en) | System and method for providing secure communications between clients and service providers | |
US20070204168A1 (en) | Identity providers in digital identity system | |
US20040128390A1 (en) | Method and system for user enrollment of user attribute storage in a federated environment | |
US20040128383A1 (en) | Method and system for enroll-thru operations and reprioritization operations in a federated environment | |
CN105556894A (en) | Network connection automation | |
ZA200500060B (en) | Distributed hierarchical identity management | |
WO2001018716A1 (en) | System and method for facilitating access by sellers to certificate-related and other services | |
CN113411324B (en) | Method and system for realizing login authentication based on CAS and third-party server | |
CA2458257A1 (en) | Distributed hierarchical identity management | |
KR20020033891A (en) | unified web-page access system and its method | |
CA2601654A1 (en) | Secure messaging system and method | |
Mahesar et al. | Securing XML Web Services by using a Proxy Web Service Model |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: TRUELINK, INC., CALIFORNIA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:METZGER, SCOTT;REEL/FRAME:014991/0744 Effective date: 20040213 |
|
FEPP | Fee payment procedure |
Free format text: PAYOR NUMBER ASSIGNED (ORIGINAL EVENT CODE: ASPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |
|
AS | Assignment |
Owner name: TRANSUNION INTERACTIVE, INC., ILLINOIS Free format text: CHANGE OF NAME;ASSIGNOR:TRUELINK, INC.;REEL/FRAME:021316/0495 Effective date: 20050921 |
|
AS | Assignment |
Owner name: DEUTSCHE BANK TRUST COMPANY AMERICAS,NEW YORK Free format text: SECURITY INTEREST;ASSIGNOR:TRANSUNION INTERACTIVE, INC.;REEL/FRAME:024563/0023 Effective date: 20100615 Owner name: DEUTSCHE BANK TRUST COMPANY AMERICAS, NEW YORK Free format text: SECURITY INTEREST;ASSIGNOR:TRANSUNION INTERACTIVE, INC.;REEL/FRAME:024563/0023 Effective date: 20100615 |
|
FPAY | Fee payment |
Year of fee payment: 4 |
|
AS | Assignment |
Owner name: DEUTSCHE BANK AG NEW YORK BRANCH, AS NEW ADMINISTR Free format text: ASSIGNMENT OF INTELLECTUAL PROPERTY SECURITY AGREEMENT;ASSIGNOR:DEUTSCHE BANK TRUST COMPANY AMERICAS, AS WITHDRAWING ADMINISTRATIVE AGENT AND COLLATERAL AGENT;REEL/FRAME:032763/0275 Effective date: 20140409 |
|
FPAY | Fee payment |
Year of fee payment: 8 |
|
MAFP | Maintenance fee payment |
Free format text: PAYMENT OF MAINTENANCE FEE, 12TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1553); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY Year of fee payment: 12 |
|
AS | Assignment |
Owner name: JPMORGAN CHASE BANK, N.A, NEW YORK Free format text: GRANT OF SECURITY INTEREST IN UNITED STATES PATENTS;ASSIGNORS:EBUREAU, LLC;IOVATION, INC.;SIGNAL DIGITAL, INC.;AND OTHERS;REEL/FRAME:058294/0161 Effective date: 20211201 |
|
AS | Assignment |
Owner name: SONTIQ, INC., MARYLAND Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: MARKETSHARE PARTNERS, LLC, VIRGINIA Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: NEUSTAR IP INTELLIGENCE, INC., VIRGINIA Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: NEUSTAR, INC., VIRGINIA Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: TRUSTID, INC., VIRGINIA Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: NEUSTAR INFORMATION SERVICES, INC., VIRGINIA Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: TRU OPTIK DATA CORP., ILLINOIS Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: AGGREGATE KNOWLEDGE, LLC, VIRGINIA Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: TRANSUNION TELEDATA LLC, ILLINOIS Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: TRANSUNION RENTAL SCREENING SOLUTIONS, INC., ILLINOIS Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: TRANSUNION INTERACTIVE, INC., ILLINOIS Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: TRANS UNION LLC, ILLINOIS Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: SIGNAL DIGITAL, INC., ILLINOIS Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: IOVATION, INC., ILLINOIS Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 Owner name: EBUREAU, LLC, ILLINOIS Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL 058294, FRAME 0161;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:058593/0852 Effective date: 20211223 |